Dök.NO : BY.YD.02

Release Date: 31.01.2020

Rev.Date:--

Rev.No: 0

As Private Termessos Hospital, we attach great importance to the security of your personal data, which is the building block of our core values ​​aimed at institutionalism. With this awareness, we show a high degree of sensitivity to patient privacy and, accordingly, to the preservation of all personal data belonging to our patients by processing them in the best possible way and with care. Our hospital meticulously protects your personal data by using all the possibilities offered by technology effectively, by taking data security technical and administrative measures. The security measures taken by our hospital are provided at a level suitable for possible risks, taking into account the technological possibilities.

With the awareness of this responsibility, as a Data Controller within the scope of the Law on the Protection of Personal Data No. 6698 (“KVK Law”), your personal data can only be processed within the scope and purpose described below, within the scope of the Basic Law No. 3359 on Health Services, Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates. It can be processed in accordance with the Decree-Law, Private Hospitals Regulation, Regulation on the Processing and Privacy of Personal Health Data (“Regulation”), Ministry of Health regulations and other relevant legislation.

Private Selale Termessos Hospital, in the capacity of data controller, prior to the processing of the personal data obtained, in accordance with Article 10 of the Personal Data Protection Law (“KVKK”) and in accordance with the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Clarification Obligation published by the Personal Data Protection Authority. , presents this Clarification Text to the information of the relevant persons.

• Obtaining and Processing Personal Data

Your personal data processed by Private Termessos Hospital are collected verbally, in writing or electronically through call center, website, online services and similar means depending on the health services provided. In addition, your personal data can be collected when you attend trainings, seminars or organizations organized by Private Selale Termessos Hospital. Your special quality personal data, especially your health data, and your general personal data, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law, by Private Selale Termessos Hospital for the purposes specified in this article, including but not limited to the following: It can be processed in a limited and measured way in connection with:

Your Identity Information: Your name, surname, TR ID number, passport number or temporary TR ID number, place and date of birth, marital status, gender, insurance and/or patient protocol number and other identification data that may identify you;

Your Contact Information: Your address, telephone number, e-mail address and other communication data, your voice call records kept by customer representatives or patient services in accordance with call center standards, and your personal data obtained when you contact us via e-mail, letter or other means;

Your Health Information: Any kind of information obtained during or as a result of medical diagnosis, treatment and care services, including but not limited to patient medical reports, diagnostic data, biometric data, laboratory results, test results, examination data, appointment information, prescription information. your health data,

Your health data and other personal data that you send or enter to www.termessoshastanesi.com

Patient Relationship Management: Questionnaires filled out by patients, letters of thanks and complaints, satisfaction results, etc. Your notifications to evaluate Private Selale Termessos Hospital,

Your other personal data, including your CV, provided when you apply for a job, and all kinds of personal data related to your service contract and work inclination if you are an employee of Private Selale Termessos Hospital or a related employee.

If you visit our hospital, your footage of the camera records kept for security and inspection purposes,

Your Accounting Information: Your financial data such as your bank account number, IBAN number, credit card information, billing and billing information;

Your data on private health insurance and Social Security Institution data for the purpose of financing and planning health services;

• Purposes of Processing Personal Data

All kinds of personal data obtained by Private Termessos Hospital (including but not limited to sensitive personal data) may be processed for the following purposes:

Verification of your identity by Patient Services, Health Professionals and Call Center departments,

Protection of public health, preventive medicine, medical diagnosis, treatment and care services,

Sharing the requested information with the Ministry of Health and other public institutions and organizations in accordance with the relevant legislation,

Monitoring and preventing abuse and unauthorized transactions by the Audit and Information Systems departments,

Fulfilling our legal obligations in the Health Services Basic Law No. 3359, Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates, Regulation on Private Hospitals, Regulation on the Processing and Privacy of Personal Health Data and other relevant regulations,

Financing your health services, meeting your examination, diagnosis and treatment expenses by the Patient Services, Financial Affairs, Marketing departments, sharing the information requested with private insurance companies within the scope of plausibility inquiries,

Analysis by the Human Resources, Quality, In-house trainings, Patient Experience, Information Systems departments for the purpose of improving health services, risk development,

Invoicing for our services by the Patient Services, Medical Accounting, Financial Affairs, Marketing departments,

Answering all your questions and complaints about our health services by the Hospital Management, Patient Experience, Patient Rights, Call Center departments,

Taking all necessary technical and administrative measures within the scope of data security of our hospital systems and applications by the Hospital Management and Information Systems departments,

Participation in campaigns and providing campaign information by Marketing, Media and Communication, Call Center departments, designing and transmitting special content, tangible and intangible benefits on web and mobile channels,

Measuring, increasing and researching patient satisfaction by the Hospital Management, Patient Rights, Patient Experience departments,

Preserving information about your health data, which must be kept in accordance with the relevant legislation,

Transfer of Personal Data

By ensuring that all necessary technical and administrative measures are taken to ensure the appropriate level of security in accordance with KVKK and relevant health legislation, Private Hospitals Regulation, Law on Protection of Personal Data No. 6698, Regulation on the Processing and Privacy of Personal Health Data and other related persons/institutions and/or organizations permitted by the provisions of the legislation; private insurance companies, banks, funds, auditors; consultants; work partners; We may transfer it to domestic/foreign organizations and other real and/or legal third parties that we contractually receive and/or provide services to, cooperate, and cooperate to carry out our activities.

In addition to the above, personal data may be transferred to foreign countries declared to have adequate protection by the Board (“Foreign Country with Sufficient Protection”).

• Circumstances in which Personal Data can be Processed without Express Consent in accordance with the KVK Law

Pursuant to Article 5 of the KVK Law, the following personal data may be processed without your explicit consent in the following cases:

In cases expressly provided for by law,

If you, as the data owner, are unable to express your consent due to actual impossibility, or in cases where your consent is not legally valid, it is necessary to process your personal data in order to protect your own or someone else's life or physical integrity,

Provided that it is directly related to the establishment or performance of a contract, it is necessary to process your personal data belonging to the parties to the contract,

It is compulsory for the fulfillment of a legal obligation,

Your personal data has been made public by you,

Data processing is mandatory for the establishment, exercise or protection of a right,

Data processing is mandatory for the legitimate interests of Private Selale Termessos Hospital, provided that it does not harm your fundamental rights and freedoms.

Personal health data; It may be processed without the explicit consent of the person concerned, by persons or authorized institutions and organizations under the obligation of secrecy, for the purpose of protecting public health, conducting preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and their financing.

• Method and Legal Reason for Personal Data Collection

Your personal data is collected in all kinds of verbal, written or electronic media, within the scope of the above-mentioned purposes and in order for Private Selale Termessos Hospital to fulfill its contractual and legal obligations. The legal reason for the collection of your personal data;

Law No. 6698 on the Protection of Personal Data,

Health Services Basic Law No. 3359,

Decree Law No. 663 on the Organization and Duties of the Ministry of Health and its Affiliates,

Private Hospitals Regulation,

Regulation on the Processing of Personal Health Data and Protection of Privacy,

Ministry of Health regulations and other legislation provisions.

In addition, as stated in paragraph 3 of Article 6 of the Law, personal data related to health and sexual life can only be kept confidential for the purposes of protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing. It can be processed by persons or authorized institutions and organizations that are under the obligation without seeking the explicit consent of the person concerned.

• Data security

As Private Termessos Hospital, we attach utmost importance to the meticulous protection and security of your personal data within all technical and administrative possibilities. We maintain with full compliance all the security audits that must be taken in accordance with the information security standards and procedures, we act with the awareness that personal data security is at the forefront in all our products and services we offer to you, and that these security measures are taken into account and eliminated by taking into account all kinds of technological possibilities. We would like to state that all the necessary sensitivity in this regard has been shown with the utmost care.

• Your Rights Regarding Your Personal Data

To the extent that your personal data is processed by Private Selale Termessos Hospital in the capacity of data controller, in accordance with Article 11 of the KVKK, you can fill in the "KVKK Access / Information Request Form" below and deliver it by hand to the address of the hospital where you received service, and send it through a notary public. By sending an e-mail with an e-mail signed with an electronic signature or by sending a “Word or PDF” file, which is also signed with a secure electronic signature, to kvkk@termessoshastanesi.com ;

• Learning whether any of your personal data has been processed;
• Requesting information regarding the processing activities of your personal data;
• Learning the purposes of processing your personal data;
• If personal data has been transferred to third parties in the country or abroad, learning these persons;
• Requesting correction of personal data if it is incomplete or incorrectly processed;

Requesting the deletion or destruction of personal data in case the reasons requiring the processing of personal data disappear or Private Selale Termessos Hospital does not have a legal basis or legitimate interest to process the said data;

Objecting to adverse results that may arise as a result of processing personal data through automated systems, and;

If you suffer damage due to unlawful processing of your personal data, you have the right to demand compensation for this damage.

Private Termessos Hospital will conclude the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be charged by Private Selale Termessos Hospital.

If you share your Personal Data Protection Law and IYS ​​Message Management System approval code with the personnel in charge, your personal data will be recorded in our system. Please confirm.

Click to download the PERSONAL DATA PROTECTION LAW (KVKK) APPLICATION FORM.

Best regards, Private Selale Termessos Hospital